CySA+ Test Risk Assessment 2

Question 1

A security analyst is performing a risk assessment and needs to calculate the Annualized Loss Expectancy (ALE). Which formula is correct?

Accepted Answer

ALE = SLE × ARO

Answer

ALE equals Single Loss Expectancy (SLE) multiplied by the Annualized Rate of Occurrence (ARO).

Question 2

During a risk assessment, a finding is classified as high likelihood but low impact. Which risk response is MOST appropriate?

Accepted Answer

Implement low-cost mitigating controls

Answer

High-likelihood, low-impact risks are best addressed with proportionate, low-cost controls rather than expensive remediation or full acceptance.

Question 3

Which risk assessment methodology uses likelihood and impact ratings to produce a risk score matrix?

Accepted Answer

Qualitative risk assessment

Answer

Qualitative risk assessment assigns descriptive ratings (e.g., High/Medium/Low) for likelihood and impact, plotted on a risk matrix.

Question 4

A company wants to quantify risk in financial terms to justify security spending to executives. Which approach is BEST suited?

Accepted Answer

Quantitative risk assessment

Answer

Quantitative risk assessment assigns numerical monetary values to assets, losses, and probabilities, making it easier to justify budget to executives.

Question 5

What does the term 'residual risk' refer to in a risk management context?

Accepted Answer

Risk remaining after controls have been applied

Answer

Residual risk is the level of risk that remains after security controls and mitigations have been implemented.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test Risk Assessment 2